Regulatory Compliance News

FCC Launches Cybersecurity Labeling Program and Names Lead Administrator for the U.S. Cyber Trust Mark

The U.S. Federal Communications Commission (FCC) enacted the regulatory framework establishing the "U.S. Cyber Trust Mark," a voluntary cybersecurity labeling initiative for wireless consumer Internet of Things (IoT) products. Based on baseline security criteria developed by the National Institute of Standards and Technology (NIST), the program allows qualifying smart devices—such as connected home cameras, fitness trackers, smart appliances, and baby monitors—to display a distinct security emblem accompanied by a dynamic QR code. Scanning the QR code grants consumers direct access to a national registry detailing critical device security metrics, including patch support timelines and automatic update configurations.

To oversee day-to-day operations and stakeholder engagement, the FCC selected the ioXt Alliance as the Lead Administrator for the U.S. Cyber Trust Mark Program. Under this administrative framework, accredited third-party cybersecurity testing laboratories (CyberLabs) manage product evaluations, while approved administrators authorize label usage and maintain post-market surveillance. While the labeling program remains voluntary for the general retail marketplace, federal procurement directives mandate that consumer IoT hardware supplied to U.S. government agencies carry the Cyber Trust Mark by early 2027. Original equipment manufacturers seeking market differentiation must ensure their connected hardware and supporting cloud software ecosystems pass formal evaluations at recognized CyberLabs.